CVE-2017-8716

CVE-2017-8716 is a security feature bypass affecting Windows 10 Version 1703 (Creators Update). The vulnerability arises from how Windows Control Flow Guard (CFG) handles memory-resident objects, allowing a specially crafted application to bypass CFG and execute code under the context of the curr...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0820

CVE-2020-0820 is a Windows Media Foundation information-disclosure vulnerability, caused by improper handling of objects in memory. CVSSv3 base: 5.5 (MEDIUM), local access, low privileges required, no user interaction. Confidentiality impact is HIGH; integrity/availability unaffected per the avai...

CVE-2020-1075

CVE-2020-1075 is a Windows Subsystem for Linux information-disclosure vulnerability caused by improper handling of memory-resident objects. The vulnerability could allow an attacker with local access to obtain sensitive information from memory, with CVSSv3.1 indicating local access, low attack co...

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2020-1363

CVE-2020-1363 is a Windows Picker Platform elevation of privilege vulnerability. The issue arises from improper handling of memory, enabling an attacker who already has execution on the target to elevate privileges by running a crafted application. This vulnerability is documented in multiple sou...

CVE-2020-1423

CVE-2020-1423 relates to an elevation of privilege in Windows Subsystem for Linux (WSL) where files are handled insecurely. The root cause is the way WSL handles file operations, enabling an attacker who can run a crafted program on a victim system to execute code with elevated privileges. Micros...

CVE-2015-2549

CVE-2015-2549 is a Windows kernel memory corruption local privilege escalation vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT, 10). The connected material confirms related CVEs (2549, 2550, 2552, 2553, 2554) and notes exploitation via a crafted l...

CVE-2015-6104

CVE-2015-6104 affects the Adobe Type Manager Library in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT/8.1, 10 Gold/1511). The vulnerability allows remote code execution via a crafted embedded font, due to a flaw in font processing in Win32k/font handling (Windo...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-3250

CVE-2016-3250 is a Windows kernel-mode elevation-of-privilege vulnerability in Win32k. The issue affects kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 (Gold/1511), where a crafted application could cause memory-object handling flaws to escalate privileges locally. The NVD en...

CVE-2016-3306

CVE-2016-3306 concerns the Windows kernel mishandling of session objects, enabling local privilege escalation.affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 RTMs 1507/1511/1607. Descr...

CVE-2016-3356

CVE-2016-3356 affects Microsoft Windows 10 (Creator/1607 era) where the Graphics Device Interface (GDI) mishandles memory objects, allowing remote code execution via a crafted document or web content. The root cause involves improper handling of memory objects in GDI, enabling an attacker to run ...

CVE-2016-7273

CVE-2016-7273 affects the Windows Graphics Component in Windows 10 (Gold/1511/1607) and Windows Server 2016. A remote code execution vulnerability arises from how the Graphics Component handles objects in memory, allowing an attacker to run arbitrary code when a user visits a crafted web site or ...

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0215

CVE-2017-0215 affects Windows 10 version 1607 and Windows Server 2016, describing a security feature bypass in Device Guard Code Integrity Policy that could allow injection of code into a PowerShell session. Public exploitation exists per related advisories. The issue is addressed in June 2017 se...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8704

CVE-2017-8704 concerns a Hyper-V Denial of Service in Windows 10 version 1607 and Windows Server 2016. The root cause is that Hyper-V fails to properly validate input received from an authenticated user inside a guest VM, which can cause a host crash/DoS. The vulnerability affects the Hyper-V com...

CVE-2017-8707

CVE-2017-8707 affects the Windows Hyper-V component across multiple Windows Server and client OS versions (Server 2008 SP2, R2 SP1; Windows 8.1; Server 2012 Gold/R2; Windows 10 variants 1511/1607/1703; Server 2016). The issue is an information-disclosure vulnerability caused by improper validatio...

CVE-2020-0882

CVE-2020-0882 is an information-disclosure vulnerability in the Windows GDI component. The flaw arises from improper handling of memory contents, allowing an attacker to potentially obtain sensitive information from a targeted system. The CVSS metrics indicate a network-facing but low-exploitabil...

CVE-2020-1190

Technical details, affected products, and remediation are not provided in the supplied documents. Monitor EUVD entries for updates on CVE-2020-1190.

CVE-2016-0007

CVE-2016-0007 is a local privilege escalation in the Windows sandbox: the sandbox implementation mishandles reparse points across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10 1511). A crafted application could exploit this to gain...

CVE-2016-0038

CVE-2016-0038 affects Windows Journal across multiple Windows releases (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2012 R2, Windows 10/1511). The vulnerability stems from improper handling/parsing of Journal files, enabling remote code execution when a user opens a crafted...

CVE-2016-0079

CVE-2016-0079 affects Windows 10 (versions Gold, 1511, 1607) where the Windows Kernel API improperly allows a locally authenticated user to access sensitive registry information, enabling local privilege escalation. The root cause is a kernel API design/implementation flaw that permits access to ...

CVE-2016-0095

CVE-2016-0095 is a local privilege-escalation in the Windows kernel Win32k driver. The flaw affects multiple Windows platforms (Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Server 2012 Gold/R2; Windows RT 8.1; Windows 10 Gold & 1511) and is triggered by a crafted user-space applicat...

CVE-2016-0181

CVE-2016-0181 describes a local security feature bypass in Windows 10 Gold and 1511 where a crafted application could bypass Virtual Secure Mode Hypervisor Code Integrity (HVCI) and mark kernel-mode pages as RWX. Several connected sources (CNVD-2016-03091, NVD/NVD mirror, MSRC/MS16-066, and OpenV...

CVE-2016-3221

The CVE-2016-3221 entry describes a local privilege-escalation in Windows kernel-mode drivers (Win32k) across multiple OS versions (Windows Vista SP2, Server 2008 SP2/R2, Win7 SP1, Win8.1, Server 2012, Windows RT 8.1, Windows 10 Gold/1511) exploitable by a crafted application. Affected component:...

CVE-2016-7222

CVE-2016-7222 affects Task Scheduler in Windows 10 (Gold/1511/1607) and Windows Server 2016. A locally authenticated attacker can abuse Task Scheduler by creating a task that uses a specially crafted UNC path to execute code with elevated privileges. The root cause is how Task Scheduler handles U...

CVE-2017-0080

Technical details about CVE-2017-0080 are not publicly provided in the supplied documents; the connected EUVD/CIRCL entries mention sightings/malware but do not include affected products, root cause, or remediation. Monitor for updates.

CVE-2018-8233

CVE-2018-8233 is a Windows Win32k elevation of privilege vulnerability. A local attacker who logs on could exploit memory handling flaws in the Win32k component to execute code in kernel mode, potentially installing programs or taking control of the system. Affected: Windows 10 and Windows 10 Ser...

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

CVE-2020-0871

CVE-2020-0871 is an information disclosure vulnerability in Windows Network Connections Service where objects in memory are not handled correctly, potentially exposing memory contents. The provided documents identify the vulnerability type and affected component but do not specify product version...

CVE-2020-0876

CVE-2020-0876 is a Windows Win32k information disclosure vulnerability. The win32k component improperly provides kernel information, enabling potential disclosure of sensitive data. Affected product: Windows (Win32k). Root cause: improper handling of kernel information in Win32k. Impact: informat...

CVE-2020-1189

Technical details about CVE-2020-1189 are not publicly provided in the connected documents; no affected product/version or remediation is stated. Monitor for updates.

CVE-2020-1364

CVE-2020-1364 affects Windows WalletService. Description: a denial-of-service vulnerability arising from how WalletService handles files, allowing an attacker to craft an application that corrupts system files to trigger DoS. Connected CNVD entry confirms WalletService DoS with file handling as r...

CVE-2015-2453

The CVE-2015-2453 CSRSS Local Elevation of Privilege vulnerability affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, 8.1, Server 2012 Gold/R2, Windows RT Gold/8.1). A crafted application can continue running during a subsequent user login, enabling local user...

CVE-2015-2507

CVE-2015-2507 is a local privilege-escalation in the Windows Adobe Type Manager Library. The vulnerability affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT/8.1, 10). The root cause is the Adobe Type Manager Library failing to prop...

CVE-2015-6102

CVE-2015-6102 describes a Windows kernel information-disclosure vulnerability that allows local users to bypass KASLR and discover a driver base address. Affected are Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (in...

CVE-2015-6103

CVE-2015-6103 affects the Adobe Type Manager Library in Windows Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012 (and RT) and Windows 10 1511. It allows remote code execution via a crafted embedded font. Public exploits exist (Exploit-DB entries 38714/38714), indicating observed exploi...

CVE-2016-0093

CVE-2016-0093 is a Windows kernel Win32k elevation-of-privilege vulnerability (local). The initial description lists affected OSes (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012 Gold/R2, RT 8.1, Windows 10 Gold/1511) and notes a crafted application can gain privileges via the kernel-mode...

CVE-2017-11769

CVE-2017-11769 : The Windows TRIE component on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 can be remotely exploited to achieve code execution through improper handling of DLL file loading. The vulnerability arises in how TRIE loads DLLs, allowing an attacker who can induce loading o...

CVE-2017-8460

CVE-2017-8460 is a Windows PDF information disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2/2016 and related Windows 10 versions. Connected sources confirm a Windows PDF vulnerability surface and indicate that June 2017 security updates (e.g., KB4022724/KB4022725/KB4022717/K...

CVE-2017-8473

CVE-2017-8473 affects multiple Windows platforms (Windows 7 SP1, Windows Server 2008 SP2/R2, 2012/R2, Windows 10 1511/1607, 2016). The root cause is an information-disclosure condition arising when the Windows kernel (Win32k) improperly initializes memory objects, enabling an authenticated attack...

CVE-2017-8562

CVE-2017-8562 is an elevation-of-privilege vulnerability in Windows caused by improper handling of Advanced Local Procedure Call (ALPC) calls. The issue allows a local attacker to run arbitrary code with the security context of the local system, given successful exploitation. Affected Windows ver...

CVE-2017-8591

The connected CNVD entry for CVE-2017-8591 describes a remote code execution flaw in the Windows Input Method Editor (IME) where memory objects are mishandled. Affected products include Windows platforms listed in the CVE entry (IME component on Windows 8.1, various Windows 10/Server SKUs). The r...

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2017-8624

CVE-2017-8624 corresponds to the Windows CLFS Elevation of Privilege Vulnerability in the Common Log File System. The initial description states that CLFS on multiple Windows editions handles in-memory objects in an unsafe way, enabling local privilege escalation. The CVSS data supplied indicates...

CVE-2017-8664

CVE-2017-8664 affects Windows Hyper-V remote code execution when input from a privileged user on a guest OS is not properly validated. Connected sources (e.g., CNVD-2017-28010 and OpenVAS/Nessus listings) corroborate Hyper-V input-validation as the root cause and remote-code-execution impact, but...

CVE-2020-0743

CVE-2020-0743 is an elevation of privilege in Microsoft Windows/Windows Server arising from how the Connected Devices Platform Service handles objects in memory. The root cause is a memory handling flaw in that service, enabling an attacker to execute code with elevated privileges. No specific ex...

CVE-2020-1084

CVE-2020-1084 is a Denial of Service vulnerability in the Windows Connected User Experiences and Telemetry Service. The issue arises when the service fails to validate certain function values, which could allow an attacker who can log on and run a specially crafted application to cause a DoS that...